Lucene search

K
wpvulndbWpvulndbWPVDB-ID:FFB8B425-8615-48E4-894B-A7F796522EA4
HistoryFeb 07, 2023 - 12:00 a.m.

Wicked Folders < 2.18.17 - Subscriber+ Folder Structure Update

2023-02-0700:00:00
wpscan.com
21
wicked folders
folder structure
update
vulnerability
software
permission issue
authentication.

EPSS

0.001

Percentile

33.4%

The plugin does not have authorisation check when managing its folder structure (such as moving, deleting, creating etc folders), which could allow any authenticated users, such as subscriber to perform such actions

EPSS

0.001

Percentile

33.4%

Related for WPVDB-ID:FFB8B425-8615-48E4-894B-A7F796522EA4